The latest articles on DEV Community by Jae Yoon Bae (@jae_yoon_bae). https://dev.to/jae_yoon_bae https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4182934%2F542d6b1c-f847-4905-9259-a53e3582fec7.png https://dev.to/jae_yoon_bae en Jae Yoon Bae Tue, 13 Oct 2026 18:49:45 +0000 https://dev.to/jae_yoon_bae/cloud-security-beyond-detection-why-security-state-transitions-matter-10c4 https://dev.to/jae_yoon_bae/cloud-security-beyond-detection-why-security-state-transitions-matter-10c4 <h1> Cloud Security Beyond Detection: Why Security State Transitions Matter </h1> <p>Cybersecurity is not just about detecting attacks. It's also about making sure systems recover securely after an incident.</p> <p>I'm currently working on a cybersecurity research project called <strong>Cybersecurity State Transition Integrity (CSTI)</strong>, which focuses on verifying security state changes across interconnected systems.</p> <h2> The Problem </h2> <p>Traditional security tools can detect threats, monitor vulnerabilities, and identify compromised assets.</p> <p>But what happens during recovery?</p> <p>For example, a system might move through these states:</p> <p><strong>Compromised → Isolated → Cleaned → Reauthorized → Recovered</strong></p> <p>Even if the system eventually reaches a secure state, an unsafe transition during recovery could introduce additional security risks.</p> <h2> My Approach </h2> <p>With CSTI, I'm exploring how to:</p> <ul> <li>Track security state transitions across connected assets.</li> <li>Identify potentially unsafe recovery actions.</li> <li>Verify security policies before allowing transitions.</li> <li>Evaluate attack detection and recovery-policy effectiveness separately.</li> </ul> <p>The goal is to improve security throughout the recovery process, rather than checking only the final state.</p> <h2> Why This Matters for Cloud Security </h2> <p>Cloud environments involve interconnected services, identities, applications, and resources.</p> <p>A security decision affecting one component can influence others. This makes it important to understand not only the security state of individual resources, but also how those states change.</p> <p>I believe security state transition verification could be useful for strengthening cloud incident recovery.</p> <h2> What's Next? </h2> <p>I'm continuing to develop and evaluate the CSTI prototype, focusing on reliability, detection performance, and secure recovery policies.</p> <p>I'm also interested in exploring how these ideas could be applied to cloud environments using technologies such as AWS.</p> <p>This is still a work in progress, and I'm looking forward to sharing what I learn along the way.</p> cybersecurity securityresearch cloudsecurity aws